微信退款接口开发

柔情只为你懂 2022-01-05 06:19 292阅读 0赞

步骤:

发送退款请求到微信->同步告诉你请求成功还是失败->异步回调告诉你退款成功还是失败

说明:微信退款是需要证书的,先要下载证书.如何下载百度一下就可以,很简单

//所需要的参数

appid:公众账号id,微信分配的公众账号id

mch\_id:微信分配的商户id

nonce\_str:随机字符创,长度不超过32位,随机生成便可以

out\_refund\_no:商户退款单号,请求方生成的流水号

out\_trade\_no:商户订单号,微信支付时,商户自己生成的订单号

refund\_fee：退款金额

total\_fee：订单金额(支付的金额)

notify\_url:回调地址,一定要能够请求到的地址

wxKey:微信商户平台秘钥(这个在商户平台上能找到)

Map<String, String> map = new HashMap<String, String>(); //参数对象  
        map.put("appid", appid);  
        map.put("mch\_id", mchId);  
        map.put("nonce\_str", StringUtils.getUUId());  
        map.put("out\_refund\_no",outRefundId);  
        map.put("out\_trade\_no", orderId);  
        map.put("refund\_fee",String.valueOf(refundFee));  
        map.put("total\_fee",String.valueOf(totalFee));  
        map.put("notify\_url", notify);

String sing=refundToSign(map,wxKey);

map.put("sign",sing);

//将map转换为xml格式

String param=mapToXml(map);

//发送请求

//发送请求的url地址:https://api.mch.weixin.qq.com/secapi/pay/refund

//下载下来的证书的路径:classpath:cert/apiclient\_cert.p12  //这里我是在resource下面建了一个cert文件夹

String result = refundHttpRequest(mchId,url, param, classpath);

//将返回来的xml格式数据转换为map格式的数据

Map<String, String> map=xmlToMap(result);

//获取返回的状态码

String returnCode = (String) map.get("return\_code");

//判断退款请求是否发送成功

if("SUCCESS".equals(returnCode))\{

System.err.pringln("发送成功!"+returnCode);

//获取业务结果状态码

String resultCode = (String) map.get("result\_code");  
if("SUCCESS".equals(resultCode)\{

System.err.pringln(“微信退款请求发送成功==”+resultCode);

//接收异步返回信息,微信的异步返回信息是加密的,所以要解密,解密有很多的坑,要注意

@Path("http:reciver.com") //这里的路径是你在发送请求的时候所写的notify\_url地址,一定要保证能够请求  
    public boolean refundSuccess(Map<String, String> map) throws Exception \{  
        // 获取加密信息  
        String information = map.get("req\_info").toString();  
        System.err.println("加密信息==" + information);

//获取返回的微信appId  
        String appId = map.get("appid");  
        System.err.println("返回来的appId==" + appId);  
        //微信解密是要根据秘钥解密的

String wxKey = “”; //这里的秘钥和appid一样都是微信给的  
         
        Aes aes=new Aes();  
        // 解密返回来的密文  
        String aesInformation = aes.getRefundDecrypt(information, wxKey);  
        // 将xml格式转换为map  
        Map<String, String> maps = xmlToMap(aesInformation);  
        logger.info("解密出来的内容\[map\}===" + maps);  
        try \{  
　　　　//判断是否退款成功  
            if ("SUCCESS".equals((String) maps.get("refund\_status"))) \{  
                logger.info("微信退款成功!!");  
            \}  
  
        \} catch (Exception e) \{  
            logger.info("出现异常\[e==\]" + e);  
            return false;  
        \}  
    \}

//生成签名

public String refundToSign(Map<String, String> map, String wxKey) \{  
        String prestr =getParamsOrderByKey(map); // 把数组所有元素，按照“参数=参数值”的模式用“&”字符拼接成字符串  
        String key = "&key=" + wxKey; // 商户支付密钥  
        // MD5运算生成签名  
        String mysign = PayUtil.sign(prestr, key, "utf-8").toUpperCase();  
        return mysign;  
    \}

/\*\*  
     \* 按照key排序得到参数列表字符串  
     \*  
     \* @param paramValues 参数map对象  
     \* @return 参数列表字符串  
     \*  
     \*         /\*\* 除去map中的空值和签名参数  
     \* @param sArray 签名参数组  
     \* @return 去掉空值与签名参数后的新签名参数组  
     \*/  
    public static String getParamsOrderByKey(Map<String, String> paramValues) \{  
        String params = "";  
        Set<String> key = paramValues.keySet();  
        String beginLetter = "";  
  
        List<String> paramNames = new ArrayList<String>(paramValues.size());  
  
        paramNames.addAll(paramValues.keySet());  
        Collections.sort(paramNames);  
        for (String paramName : paramNames) \{  
  
            Object b = paramValues.get(paramName);  
  
            if (b == null || b.equals("") || b.toString().equalsIgnoreCase("sign") || b.toString().equalsIgnoreCase("sign\_type")) \{  
                continue;  
            \}  
  
  
            if (params.equals("")) \{  
                params += beginLetter + paramName + "=" + paramValues.get(paramName);  
            \} else \{  
                params += "&" + paramName + "=" + paramValues.get(paramName);  
            \}  
        \}  
  
        return params;  
    \}

//生成out\_refund\_no

public String getRandomUUID() \{  
        java.util.Date dateNow = new java.util.Date();  
        SimpleDateFormat dateFormat = new SimpleDateFormat("yyyyMMddHHmmss");  
        String dateNowStr = dateFormat.format(dateNow);  
        StringBuffer sb = new StringBuffer(dateNowStr);  
        Random rd = new Random();  
        String n = "";  
        int rdGet;  
  
        do \{  
            rdGet = Math.abs(rd.nextInt()) % 10 + 48;  
            char num1 = (char) rdGet;  
            String dd = Character.toString(num1);  
            n += dd;  
        \} while (n.length() < 6);  
        sb.append(n);  
  
        return sb.toString();  
    \}

//生成nonce\_str

public static String getUUId()\{  
        return UUID.randomUUID().toString().replaceAll("-", "");  
    \}

/\*\*  
     \* 将Map转换为XML格式的字符串  
     \*  
     \* @param data Map类型数据  
     \* @return XML格式的字符串  
     \* @throws Exception  
     \*/  
    public static String mapToXml(Map<String, String> data) throws Exception \{  
        org.w3c.dom.Document document = WXPayXmlUtil.newDocument();  
        org.w3c.dom.Element root = document.createElement("xml");  
        document.appendChild(root);  
        for (String key : data.keySet()) \{  
            String value = data.get(key);  
            if (value == null) \{  
                value = "";  
            \}  
            value = value.trim();  
            org.w3c.dom.Element filed = document.createElement(key);  
            filed.appendChild(document.createTextNode(value));  
            root.appendChild(filed);  
        \}  
        TransformerFactory tf = TransformerFactory.newInstance();  
        Transformer transformer = tf.newTransformer();  
        DOMSource source = new DOMSource(document);  
        transformer.setOutputProperty(OutputKeys.ENCODING, "UTF-8");  
        transformer.setOutputProperty(OutputKeys.INDENT, "yes");  
        StringWriter writer = new StringWriter();  
        StreamResult result = new StreamResult(writer);  
        transformer.transform(source, result);  
        String output = writer.getBuffer().toString(); // .replaceAll("\\n|\\r", "");  
        try \{  
            writer.close();  
        \} catch (Exception ex) \{  
        \}  
        return output;  
    \}

public final class WXPayXmlUtil \{  
    public static DocumentBuilder newDocumentBuilder() throws ParserConfigurationException \{  
        DocumentBuilderFactory documentBuilderFactory = DocumentBuilderFactory.newInstance();  
        documentBuilderFactory.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);  
        documentBuilderFactory.setFeature("http://xml.org/sax/features/external-general-entities", false);  
        documentBuilderFactory.setFeature("http://xml.org/sax/features/external-parameter-entities", false);  
        documentBuilderFactory.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);  
        documentBuilderFactory.setFeature(XMLConstants.FEATURE\_SECURE\_PROCESSING, true);  
        documentBuilderFactory.setXIncludeAware(false);  
        documentBuilderFactory.setExpandEntityReferences(false);  
  
        return documentBuilderFactory.newDocumentBuilder();  
    \}  
  
    public static Document newDocument() throws ParserConfigurationException \{  
        return newDocumentBuilder().newDocument();  
    \}  
\}

/\*\*  
     \* 向微信退款发送请求  
     \* @param mchid 商户号  
     \* @param url 微信退款请求路径  
     \* @param parm 请求的参数  
     \* @return  
     \*/  
      
    public static String refundHttpRequest(String mchid,String url,String parm,String filepath) \{  
        /\*\*  
         \* 注意PKCS12证书 是从微信商户平台-》账户设置-》 API安全 中下载的  
         \*/  
        KeyStore keyStore;  
        try \{  
            keyStore = KeyStore.getInstance("PKCS12");  
            File file = (ResourceUtils.getFile(filepath));//证书路径  
            FileInputStream instream = new FileInputStream(file);  
            keyStore.load(instream,mchid.toCharArray());//这里写密码..默认是你的MCHID  
               SSLContext sslcontext = SSLContexts.custom()  
                        .loadKeyMaterial(keyStore, mchid.toCharArray())//这里密码  
                        .build();  
               SSLConnectionSocketFactory sslsf = new SSLConnectionSocketFactory(sslcontext,new String\[\] \{ "TLSv1" \},null, SSLConnectionSocketFactory.BROWSER\_COMPATIBLE\_HOSTNAME\_VERIFIER);  
                CloseableHttpClient httpclient = HttpClients.custom()  
                        .setSSLSocketFactory(sslsf)  
                        .build();  
                try \{  
                    HttpPost httpost = new HttpPost(url);  
                    httpost.setEntity(new StringEntity(parm, "UTF-8"));  
                    CloseableHttpResponse response = httpclient.execute(httpost);  
                    try \{  
                        HttpEntity entity = response.getEntity();  
                        String jsonStr = EntityUtils.toString(response.getEntity(), "UTF-8");  
                        EntityUtils.consume(entity);  
                       return jsonStr;  
                    \} finally \{  
                        response.close();  
                    \}  
                \} finally \{  
                    httpclient.close();  
                \}  
                  
        \} catch (KeyStoreException e) \{  
            e.printStackTrace();  
        \} catch (NoSuchAlgorithmException e) \{  
            e.printStackTrace();  
        \} catch (CertificateException e) \{  
            e.printStackTrace();  
        \} catch (IOException e) \{  
            e.printStackTrace();  
        \} catch (KeyManagementException e) \{  
            e.printStackTrace();  
        \} catch (UnrecoverableKeyException e) \{  
            e.printStackTrace();  
        \}  
     return null;  
    \}

/\*\*  
     \* XML格式字符串转换为Map  
     \*  
     \* @param strXML XML字符串  
     \* @return XML数据转换后的Map  
     \* @throws Exception  
     \*/  
    public static Map<String, String> xmlToMap(String strXML) throws Exception \{  
        try \{  
            Map<String, String> data = new HashMap<String, String>();  
            DocumentBuilder documentBuilder = WXPayXmlUtil.newDocumentBuilder();  
            InputStream stream = new ByteArrayInputStream(strXML.getBytes("UTF-8"));  
            org.w3c.dom.Document doc = documentBuilder.parse(stream);  
            doc.getDocumentElement().normalize();  
            NodeList nodeList = doc.getDocumentElement().getChildNodes();  
            for (int idx = 0; idx < nodeList.getLength(); ++idx) \{  
                Node node = nodeList.item(idx);  
                if (node.getNodeType() == Node.ELEMENT\_NODE) \{  
                    org.w3c.dom.Element element = (org.w3c.dom.Element) node;  
                    data.put(element.getNodeName(), element.getTextContent());  
                \}  
            \}  
            try \{  
                stream.close();  
            \} catch (Exception ex) \{  
                // do nothing  
            \}  
            return data;  
        \} catch (Exception ex) \{  
            throw ex;  
        \}  
    \}

//微信返回的加密信息进行解密

import java.lang.reflect.Field;  
import java.lang.reflect.Modifier;  
import java.security.MessageDigest;  
import java.security.NoSuchAlgorithmException;  
import java.security.Permission;  
import java.security.PermissionCollection;  
import java.security.Security;  
import java.util.Map;  
  
import javax.crypto.Cipher;  
import javax.crypto.SecretKey;  
import javax.crypto.spec.SecretKeySpec;  
  
import org.bouncycastle.jce.provider.BouncyCastleProvider;  
import org.slf4j.Logger;  
import org.slf4j.LoggerFactory;  
import sun.misc.BASE64Decoder;  
  
public class Aes \{  
  
    static Logger logger = LoggerFactory.getLogger(Aes.class);  
    private static MessageDigest sMd5MessageDigest;  
    private static StringBuilder sStringBuilder;  
  
    private static void removeCryptographyRestrictions() \{  
        if (!isRestrictedCryptography()) \{  
            logger.info("Cryptography restrictions removal not needed");  
            return;  
        \}  
        try \{  
  
            final Class<?> jceSecurity = Class.forName("javax.crypto.JceSecurity");  
            final Class<?> cryptoPermissions = Class.forName("javax.crypto.CryptoPermissions");  
            final Class<?> cryptoAllPermission = Class.forName("javax.crypto.CryptoAllPermission");  
  
            final Field isRestrictedField = jceSecurity.getDeclaredField("isRestricted");  
            isRestrictedField.setAccessible(true);  
            final Field modifiersField = Field.class.getDeclaredField("modifiers");  
            modifiersField.setAccessible(true);  
            modifiersField.setInt(isRestrictedField, isRestrictedField.getModifiers() & ~Modifier.FINAL);  
            isRestrictedField.set(null, false);  
  
            final Field defaultPolicyField = jceSecurity.getDeclaredField("defaultPolicy");  
            defaultPolicyField.setAccessible(true);  
            final PermissionCollection defaultPolicy = (PermissionCollection) defaultPolicyField.get(null);  
  
            final Field perms = cryptoPermissions.getDeclaredField("perms");  
            perms.setAccessible(true);  
            ((Map<?, ?>) perms.get(defaultPolicy)).clear();  
  
            final Field instance = cryptoAllPermission.getDeclaredField("INSTANCE");  
            instance.setAccessible(true);  
            defaultPolicy.add((Permission) instance.get(null));  
  
            logger.info("Successfully removed cryptography restrictions");  
        \} catch (final Exception e) \{  
            logger.error("Failed to remove cryptography restrictions", e);  
        \}  
    \}  
  
    private static boolean isRestrictedCryptography() \{  
        // This matches Oracle Java 7 and 8, but not Java 9 or OpenJDK.  
        final String name = System.getProperty("java.runtime.name");  
        final String ver = System.getProperty("java.version");  
        return name != null && name.equals("Java(TM) SE Runtime Environment")  
                && ver != null && (ver.startsWith("1.7") || ver.startsWith("1.8"));  
    \}  
      
    //破解jdk密文长度限制，因为在使用ase解密的时候,会有长度限制  
    public  void Crack()\{  
        try \{  
            Class<?> clazz = Class.forName("javax.crypto.JceSecurity");  
            Field nameField = clazz.getDeclaredField("isRestricted");  
            Field modifiersField = Field.class.getDeclaredField("modifiers");  
            modifiersField.setAccessible(true);  
            modifiersField.setInt(nameField, nameField.getModifiers() & ~Modifier.FINAL);  
            nameField.setAccessible(true);  
            nameField.set(null, java.lang.Boolean.FALSE);  
        \} catch (Exception ex) \{  
            logger.info("破解密文长度出现异常=="+ex);  
        \}  
    \}  
  
    public  String getRefundDecrypt(String reqInfoSecret, String key) \{  
        removeCryptographyRestrictions();  
        //解密之前先调用破解方法  
        Crack();  
        String result = "";  
        try \{  
            Security.addProvider(new BouncyCastleProvider());  
            BASE64Decoder decoder = new sun.misc.BASE64Decoder();  
            byte\[\] bt = decoder.decodeBuffer(reqInfoSecret);  
            String md5key = md5(key).toLowerCase();  
            SecretKey secretKey = new SecretKeySpec(md5key.getBytes(), "AES");  
            Cipher cipher = Cipher.getInstance("AES/ECB/PKCS7Padding", "BC");  
            cipher.init(Cipher.DECRYPT\_MODE, secretKey);  
            byte\[\] resultbt = cipher.doFinal(bt);  
            result = new String(resultbt);  
        \} catch (Exception e) \{  
            logger.info("转换过程中出现的异常==" + e);  
        \}  
        return result;  
    \}  
  
    public static String md5(String s) \{  
        md5();  
        sMd5MessageDigest.reset();  
        sMd5MessageDigest.update(s.getBytes());  
        byte\[\] digest = sMd5MessageDigest.digest();  
        sStringBuilder.setLength(0);  
  
        for (int i = 0; i < digest.length; ++i) \{  
            int b = digest\[i\] & 255;  
            if (b < 16) \{  
                sStringBuilder.append('0');  
            \}  
  
            sStringBuilder.append(Integer.toHexString(b));  
        \}  
  
        return sStringBuilder.toString().toUpperCase();  
    \}  
  
    public static void md5()\{  
        try \{  
            sMd5MessageDigest = MessageDigest.getInstance("MD5");  
        \} catch (NoSuchAlgorithmException ex) \{  
            logger.info("md5出现异常==="+ex);      
        \}  
        sStringBuilder = new StringBuilder();  
    \}  
/\*  
    public static void main(String\[\] args) \{  
        String a ="";  
        String key = "";  
        Aes as=new Aes();  
        System.out.println(a);  
        System.out.println(key);  
        String B =as. getRefundDecrypt(a, key);  
        System.out.println(B);  
        try \{  
            Map<String, String> map = WXPayUtil.xmlToMap(B);  
            System.err.println(map);  
        \} catch (Exception e) \{  
            e.printStackTrace();  
        \}  
    \}\*/  
\}

说明:

微信的加密信息要用到ase解密,而jdk对密文的长度是有限制的,JAVA运行环境默认不允许256位密钥的AES加解密，会报Illegal key size or default parameters.。在jdk1.8.5后的版本它会自带两个文件夹,一个是有限制的,一个是没有限制的,只要切换为没有限制的就可以,但是之前的版本,是没有的,所以只能将有限制的文件给替换掉

在官方网站下载JCE无限制权限策略文件:

JDK7版本JCE下载地址： [http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html][http_www.oracle.com_technetwork_java_javase_downloads_jce-7-download-432124.html]

JDK8版本JCE下载地址：[http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html][http_www.oracle.com_technetwork_java_javase_downloads_jce8-download-2133166.html]

注意：你的jdk版本是几就下载对应的版本

下载解压后就是替换$\{java\_home\}/jre/lib/security/ 下面的local\_policy.jar和US\_export\_policy.jar。

除此之外还有一种办法就是将其规则给破解掉,但是这种方法是不推荐使用的,我因为特殊情况就是用了这种办法,在上面的代码中已经有说明

https://blog.csdn.net/z199172177/article/details/78954503 ；这是破解方法的出处

https://blog.csdn.net/tangtao\_xp/article/details/84944049；这里也有说明,可以查看

https://pay.weixin.qq.com/wiki/doc/api/app/app.php?chapter=9\_4&index=6 //这个是微信开发地址

微信退款证书说明:

证书放在项目中,在服务器上是堵不到的,你在本地测试的时候是可以的,所以要在pom.xml中配置一下,在<plugins></plugins>中添加

<plugins>  
            <plugin>  
                <groupId>org.apache.maven.plugins</groupId>    
                <artifactId>maven-resources-plugin</artifactId>  //这里要注意不要和maven-compiler-plugin搞成一样  
                <configuration>  
                    <encoding>UTF-8</encoding>  
                      
                    <nonFilteredFileExtensions>  
                        <nonFilteredFileExtension>pem</nonFilteredFileExtension>  
                        <nonFilteredFileExtension>pfx</nonFilteredFileExtension>  
                        <nonFilteredFileExtension>p12</nonFilteredFileExtension>  
                    </nonFilteredFileExtensions>  
                </configuration>  
            </plugin>

<plugin>  
                <groupId>org.apache.maven.plugins</groupId>  
                <artifactId>maven-compiler-plugin</artifactId>  
                <version>3.3</version>  
                <configuration>  
                    <source>1.7</source>  
                    <target>1.7</target>  
                    <encoding>utf-8</encoding>  
                </configuration>  
            </plugin>  
        </plugins>

转载于:https://www.cnblogs.com/lxsxsy/p/10783672.html

[http_www.oracle.com_technetwork_java_javase_downloads_jce-7-download-432124.html]: http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html
[http_www.oracle.com_technetwork_java_javase_downloads_jce8-download-2133166.html]: http://www.oracle.com/technetwork/java/javase/downloads/jce8-download-2133166.html